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METHOD AND SYSTEM FOR SECURE KEY GENERATION 

CROSS-REFERENCE TO RELATED APPLICATIONS/INCORPORATION BY 

REFERENCE 

[01] Not Applicable. 

FIELD OF THE INVENTION 

[02] Certain embodiments of the invention relate to conditional access and copy 
protection systems. More specifically, certain embodiments of the invention relate to a 
method and system for secure key generation. 

BACKGROUND OF THE INVENTION 

[03] Digital television, popularly referred to as DTV, is an enhanced television system 
capable of transmitting and receiving digitized signals, displaying digital images and 
playing digital audio. While some of these features may be present in current analog 
television systems such as national television standards committee (NTSC), sequential 
couleur avec memoire (SECAM) and phase alternate line (PAL), the combination of 
digitized transmission, reception, video and audio distinguishes digital television from 
current analog television systems. 

[04] The technology utilized by digital television is superior to current analog 

television systems and utilizes scarce bandwidth in a more spectrum efficient manner. 

In this regard, digital television allows more channels containing more information to be 

broadcasted within an equivalent bandwidth utilized by curent analog television 

systems. Accordingly, any excess bandwidth can be re-allocated for use by other types 

of communication systems. Broadcasters utilizing digital television systems are 
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therefore, capable of providing over-the air television signals containing higher picture 
resolutions than current analog broadcast television systems. For these reasons, 
Congress had mandated that current broadcast television service must, in time, be 
completely converted to digital television. 

[05] In order to provide these high resolution television signals, digital television 
systems utilize various video and audio compression techniques, for example, moving 
picture experts group (MPEG). MPEG is a joint committee of the international 
standardization organization (ISO) and the international electrotechnical commission 
(lEC), and is generally referred to as ISO/IEC JTC1/SC29/WG1 1. MPEG includes 
various charter groups, each of which contains a diverse representation from among 
computer, telecommunications, television, cable, satellite, and other industries 
worldwide. The charter of various MPEG video and audio groups is to develop 
compression standards for full-motion video, associated audio and their multiplex for 
digital storage media. These compression standards are also utilized by digital cable 
television systems and digital satellite systems. Although compression standards are 
promulgated by the various groups, transmission and encryption or conditional access 
techniques are not specified in the MPEG standards. Accordingly, system designers 
and integrators may freely determine and implement their own transmission or 
conditional access techniques. 

[06] Additionally, in some conventional audio/video processing systems, audio/video 
data such as movies are vulnerable to piracy and require protection against illegal 
copying. The loss associated with piracy and unauthorized copying is greatest in high 
value movies and video programs. Since uncompressed digital video in clear form can 
be used to create perfect copies of the high value programs in particular, it is necessary 
to enable the protection of uncompressed video with copy protection technology. To 
protect against piracy or unauthorized copying, video data such as high value video 
content is sometimes compressed and encrypted before it can be accessed in memory 
and storage devices. Video decoding and de-compression systems generally utilize 
frame buffers for motion prediction, which may provide enhanced picture quality. Video 
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images or pictures stored in these frame buffers are un-compressed and clear. 
Accordingly, attackers or hackers may utilize various schemes to access these buffers 
and copy the video images. 

[07] Further limitations and disadvantages of conventional and traditional approaches 
will become apparent to one of skill in the art, through comparison of such systems with 
some aspects of the present invention as set forth in the remainder of the present 
application with reference to the drawings. 
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BRIEF SUMMARY OF THE INVENTION 



[08] Certain embodiments of the invention may be found in a method and system for 
producing a secure key. Aspects of the method may comprise the steps of receiving at 
least a first input key, a second input key and a third input key and generating a first 
output key based on at least the first input key, the second input key and the third input 
key. The first output key is generated so as to ensure that it is unique and that it differs 
from the first input key. The first input key may be a customer key, the second input key 
may be a customer key selection and the third input key may be a key variation. 
Notwithstanding, it may be determined whether the first output key is a unique key 
and/or is not equivalent to the first input key. If it is determined that the first output key 
is not a unique key and/or is equivalent to the first input key, then a second output key 
may be generated based on a modified one of at the first input key, second input key 
and/or third input key. It may further be determined whether the second output key is a 
unique key and/or is not equivalent to the modified one of the first input key, the second 
input key and/or the third input key. The first output key and the second output key may 
not be a weak key or a semi-weak key. 

[09] In another aspect of the invention, the first input key, the second input key and 
the third input key may be mapped in order to generate mapped output key data. An 
intermediate key may also be generated based on the first input key. The generated 
intermediate key and the generated mapped output key data may be scrambled to 
create a scrambled output. At least a portion of the generated mapped output key data 
may be masked and exclusive ORed with the scrambled output to generate the first 
output key. The generated first output key may subsequently be transferred to an 
encryption engine that utilizes the generated first output key to encrypt information. 

[10] Another embodiment of the invention may provide a machine-readable storage, 
having stored thereon, a computer program having at least one code section for 
producing a secure key. The at least one code section may be executable by a 
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machine, thereby causing the machine to perform the steps as described above for 
producing a secure key. 

[11] In another embodiment of the invention, the system for producing a secure key 
may comprise a secure key generator that receives at least a first input key, a second 
input key and a third input key. Accordingly, the secure key generator may generate a 
first output key based on at least the first input key, the second input key and the third 
input key. The first output key is generated so that it is a unique key and differs from at 
least the first input key. The first input key may be a customer key, the second input 
key a customer key selection and the third input key a key variation. The first output 
key and the second output key may not be a weak and/or a semi-weak key. The secure 
key generator may determine whether the first output key is a unique key and is not 
equivalent to at least the first input key. If the secure key generator determines that the 
first output key is a non-unique key and/or is equivalent to at least the first input key, the 
secure key generator may generate a second output key based on a modified one of 
the first input key, the second input key and/or the third input key. The secure key 
generator may also determine whether the second output key is a unique key and/or is 
not equivalent to at least the modified first input key, second input key and/or third input 
key. 

[12] The system may further comprise a mapper that maps at least the first input key, 
the second input key and the third input key to generate mapped output key data. A key 
generator may generate an intermediate key based on the first input key. A scrambler 
may scramble the generated intermediate key and the generated mapped output key 
data to create a scrambled output. A masker may mask at least a portion of the 
generated mapped output key data and an exclusive OR operator may exclusive OR 
the masked portion of the generated mapped output key data and the scrambled output 
to generate the first output key. The secure key generator may transfer the generated 
first output key to an encryption engine that may utilize the generated first output key to 
encrypt information. 
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[13] Another embodiment of a system for producing a secure key in accordance with 
various aspects of the invention may comprise a mapper. A scrambler and a masker 
may be coupled to the mapper. A key generator may also be coupled to the scrambler 
and an XOR operator may be coupled to the masker and the scrambler. In this 
arrangement, an output of the XOR gate functions as an output of the system for 
producing a secure key. At least one processor and/or an encryption engine may be 
coupled to an output of the XOR operator. A memory may also be coupled to the 
encryption engine and/or the processor. 

[14] These and other advantages, aspects and novel features of the present 
invention, as well as details of an illustrated embodiment thereof, will be more fully 
understood from the following description and drawings. 
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BRIEF DESCRIPTION OF SEVERAL VIEWS OF THE DRAWINGS 



[15] FIG. 1 is a high level blocl^ diagram of system that may be utilized in connection 
with generating an output l<ey from a plurality of input keys utilizing a secure key 
generator, in accordance with an embodiment of the invention. 

[16] FIG. 2 is a block diagram of a secure key generation function that may be utilized 
to generate the output key from the plurality of input keys of FIG. 1 , in accordance with 
an embodiment of the invention. 

[17] FIG. 3 is a flowchart that may be utilized in conjunction with the secure key 
generation function of FIG. 2 and which may be utilized to check the feasibility of 
generated keys, in accordance with an embodiment of the invention. 

[18] FIG. 4 is a block diagram of a secure key generation system that may be utilized 
to generate the output key from the plurality of input keys of FIG. 2, in accordance with 
an embodiment of the invention. 
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DETAILED DESCRIPTION OF THE INVENTION 

[19] In digital cable and satellite systems, high value movies and video programs or 
content may be protected by conditional access (CA) or copy protection (CP) 
scrambling systems. In this regard, scrambling keys may be controlled and encrypted 
by the CA or CP system and as part of playback or during reception, these keys may be 
decrypted and utilized to descramble the content in a set-top box (STB), for example. 
Aspect of the invention provide a method and system for generating user conditional 
access or copy protection keys by securely manipulating a number of input keys. 

[20] In a system that utilizes an encryption or decryption engine such as PES, 3DES 
or AES, the protection of the key is one of the most important tasks for ensuring its 
security. For many applications, a key may be generated from a number of input keys. 
The generated key may be referred to as an output key. Typically, the output key may 
be generated from any combination of a customer key, a customer key selection and a 
key variation. The customer key is a key that may be assigned to a given vendor of a 
STB. A customer key selection is a key that may be assigned to be utilized for different 
operating modes. For example, a particular customer key selection may be utilized for 
live decoding mode and another utilized for playback mode. A key variation is a key 
that may be utilized to differentiate between different set-top boxes (STBs). In general, 
the key generation process may be executed in such a manner that it satisfies various 
security requirements. 

[21] Accordingly, certain embodiments of the invention may be found in a method and 
system for producing a secure key. In accordance with an embodiment of the invention, 
aspects of the method may comprise receiving at least a first input key, a second input 
key and a third input key and generating a first output key based on at least the first 
input key, second input key and third input key. The first output key is generated so as 
to ensure that it is unique and that it differs from the first input key. The first input key 
may be a customer key, the second input key may be a customer key selection and the 
third input key may be a key variation. 
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[22] Notwithstanding, it may be determined whether the first output key is a unique 
key and/or is not equivalent to the first input key. If it is determined that the first output 
key is not a unique key and/or is equivalent to the first input key, then a second output 
key may be generated based on a modified first input key, a modified second input key 
and/or a modified third input key. In either case, a determination may be made as to 
whether the second output key is a unique key and/or is not equivalent to the modified 
first input key, the second input key and/or the third input key. The first output key and 
the second output key may not be a weak key or a semi-weak key. 

[23] The first input key, the second input key and the third input key may be mapped 
by a mapping function in order to generate mapped output key data. An intermediate 
key may also be generated based on the first input key. The generated intermediate 
key and the generated mapped output key data may be scrambled to create a 
scrambled output. At least a portion of the generated mapped output key data may be 
masked and exclusive ORed with the scrambled output to generate the first output key. 
The generated first output key may subsequently be transferred to an encryption engine 
that utilizes the generated first output key to encrypt information. 

[24] FIG. 1 is a high level block diagram of system 100 that may be utilized in 
connection with generating an output key from a plurality of input keys utilizing a secure 
key generator, in accordance with an embodiment of the invention. Referring to FIG. 1, 
there is shown a secure key generation function block 110; a first input key which is a 
customer key, cust_key 120; a second input key which is a customer key selection, 
cus_key_sel 130; a third input key which is a key variation, key_var 140; and an output 
key out_key 150. The customer key, cus__key 120, may be a K-bit customer key and 
the customer key selection, cus_key_sel 130, may be an L-bit customer selection 
vector. The input key variation key_var 140, may be an M-bit key variation vector and 
the output key, out_key 140, may be an N-bit manipulated key. In operation, the secure 
key generation function 110 receives the input keys, cus__key 120, cus_key_sel 130, 
key^var 140 and accordingly, generates the output key, out_key 150. 
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[25] FIG. 2 is a block diagram 200 of a secure key generation function that may be 
utilized to generate the output key from the plurality of input keys of FIG. 1, in 
accordance with an embodiment of the invention. Referring to FIG. 2, the key 
generation function may comprise a key generator 260, a mapper 270, a scrambler 280, 
a masking function block or masker 290, and a XOR operator 295. Input cus_key 220 
may be provided as an input to the key generator 260 and the mapper 270, and input 
keys cus_key_sel 230 and key_var may be provided as an input to the mapper 270. An 
output 297 of the key generator 260 may be coupled to the scrambler 280. An output 
272 of the mapper 270 is coupled to an input of the masking function block 290 and an 
input to the scrambler 280. An output 282 of the scrambler 280 and an output 292 of 
the masking function block 290 may be coupled to the XOR operator 295. An output of 
the XOR operator 295 is the resultant N-bit output key, out_key 250. In this 
arrangement, each of the K-bit customer key 220, the L-bit customer key selection 230 
and the M-bit key variation 240 may be mapped by the mapper 270, 

[26] The mapper 270 may comprise suitable mapping circuitry, logic and/or code that 
may be adapted to manipulate, for example, the customer key 220, the customer key 
selection vector 230 and the key variation vector to generate input data to the scrambler 
280 and the masking function block 290. Accordingly, data 272 may be represented as: 
Data = MappingLogic(Cus_key, Cus_key_sel, Key_var). 

[27] In accordance with various aspects of the invention, the mapper 270 may be 
designed so that it may exhibit the following properties. The mapper 270 may operate 
as a diffusion process that smoothes out the statistical distributions among customer 
key 220, customer key selection vector 230 and key variation vector 240. The mapper 
270 may be adapted to generate a fixed length output 272 that may be relatively simple 
to compute. The mapper 270 may be implemented so that it is a one way function, 
which is very difficult to invert. In this regard, when given a particular output 272 is 
generated by the mapper 270, the input may be extremely difficult to determine based 
on those inputs. The mapper 270 may also be configured to operate in a collision free 
manner for at least some customer keys. In this regard, no two inputs received by the 
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mapper 207 may be mapped into the same output. In other words, the mapper is 
collision free for customer keys 220, customer key selection vectors 230 and their key 
variation vectors 240 and two distinct inputs may not produce or be mapped to the 
same output. 

[28] The key generator 260 may comprise suitable logic, circuitry and/or code that 
may be adapted to generate keys based on a received customer key 220. The key 
generator 260 may be designed so that there may be a one-to-one correspondence 
between the input, cus_key 220, and the output, gen_key 297. 

[29] The masking function block or masker 290 may comprise suitable logic, circuitry 
and/or code that may be adapted to increase the security of the scrambler 280. The 
masking function block or masker 290 may be designed in conjunction with the mapper 
270 and key generator 260 to ensure that certain condition are maintained. For 
example, the output, out_key 250, may not be equivalent to a corresponding customer 
key, cus_key 220. In accordance with another aspect of the invention, the masking 
function block or masker 290 may be implemented so that the output key, out_key 250, 
may never be a weak key or a semi-weak key. For example, DES has four weak self- 
dual keys k for which Ek(Ek(m)) = m and twelve semi-weak keys which come in pairs ki 
and k2 such that Eki(Ek2(m)) = m. Accordingly, the output key, out_key 250, may never 
be one of these weak and semi-weak keys if the output key 250 is to be utilized with a 
DES engine, for example. The following is a table illustrating exemplary weak and semi 
weak keys. 



Weak Keys 


KEY 


DUAL 


0x0101010101010101 


0x0101010101010101 


OxFEFEFEFEFEFEFEFE 


OxFEFEFEFEFEFEFEFE 


OxEOEOEOEOF1F1F1F1 


OxEOEOEOEOFIFIFIFI 


Ox1F1F1F1FOEOEOEOE 


OxIFIFIFIFOEOEOEOE 






Semi-V 


\leak Keys 


KEY (k1) 


DUAL (k2) 


OxE001E001F101F101 


Ox01E001E001F101F1 
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OxFE1 FFE1 FFEOEFEOE 


0x1 FFE1 FFEOEFEOEFE 


0XE01FE01FF10EF10E 


Ox1FE01FEOOEF10EF1 


0X01FE01FE01FE01FE 


OxFEOIFEOIFEOIFEOI 


Ox011F011F010E010E 


Ox1F011F010E010E01 


OxEOFEEOFEF1FEF1FE 


OxFEEOFEEOFEFIFEFI 



[30] FIG. 3 is a flowchart 300 that may be utilized in conjunction with the secure key 
generation function of FIG. 2 and which may be utilized to check the feasibility of 
generated keys, in accordance with an embodiment of the invention. A configuration 
may be defined having inputs comprising Q different values of cus_key 220, R different 
values of cus_key_sel 230 for each cus_key 220 and S different values for key_var 240. 
These configuration values may be utilized in connection with the secure key generation 
function of FIG. 2. The general methodology is to loop through all the possible input 
combinations of the Q different values of cus_key 220, R different values of 
cus_key_sel 230 and S different values for key_var 240 in order to ensure that no 
conditions or requirements are violated. If a condition is violated, a change in the 
configuration of at least one of the Q different values of cus_key 220, R different values 
of cus_key_sel 230 and S different values for key_var 240 may be performed and these 
values may again be tested to determine whether a condition is violated. The counters 
I, J, K are reset to check that possible input combinations in the new configuration does 
not result in a violated condition. 

[31] Referring to FIG. 2 and FIG. 3, the exemplary steps may start at step 302. In 
step 302, counters I representing a current customer key 1=1, Q, J representing the 
current customer key selection vector J=1, .... R, and K representing the key variation 

vector K=1 S may be initialized to zero (0). Referring to FIG. 3 and FIG. 2, in step 

306, a j"^ customer key, cus_key is assigned to a value A, an i'*' customer key selection, 
cus_key_sel is assigned to a value B, and a K'^ key variation, key_varition is assigned 
to a value C. In step 308, the mapper 270 may then operate on the assigned values of 
A, B, C and generate output data 272. In step 310, the key generator 310 may operate 
on the assigned value A and generates output key_gen 297. The output data 272 from 
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the mapper 270 is passed to the masker 290 and the scrambler 280. The mapper 290 
after operating on the data 272 generates an output 292. 

[32] The output key_gen 297 from the key generator 260 is also passed to the 
scrambler 280. Accordingly, in step 312, the scrambler 280 may operate on the output 
data 272, the key_gen 297 generated from the key generator 260 and produces a 
output 282. The output 282 produced by the scrambler 280 and the output 292 
produced by the masker 290 are also XOR in step 312 to produce the resultant output, 
out_key 250. Once the output key, out_key 250 has been generated, step 314 through 
step 334 may be utilized to determine whether the output key, out key 250 is valid or 
has violated at least one of the previously stated conditions. The mapper, key 
generator, masker and/or key table may be adaptively changed based on, for example, 
a uniqueness of the output key. 

[33] Accordingly, in step 314, it may be detemriined whether the output key, out_key 
250 is unique. If it is determined that the output key, out_key 250, is not unique, then in 
step 334, at least one of the mapper 270, key generator 260, masker 290 and/or the 
inputs A, B, C may be modified. Control may then pass to the start step 302 and new 
keys are generated based on the modified information from step 334. In step 314, if it is 
detemnlned that the output key, out_key 250 Is unique, then in step 316, it may be 
detemilned whether the output key 250 is equivalent to the customer key, cus_key or A. 
If it is determined that the output key, out_key 250 is the same as the customer key, 
cust_key 220, then in step 334, then at least one of the mapper 270, key generator 260, 
masker 290 and/or the inputs A, B, C may be modified. If it is determined that the 
output key, out_key 250 is not the same as the customer key, cust_key 220, then in 
step 318, It may be determined whether the value of K is equivalent to the value of S. 
On the Initial pass through steps 302 to step 318, the value of K is zero (0) since it was 
initialized to zero (0). S represents the final value of the key variation vector in the 
sequence K=1, S. If it is determined that the value of K is equivalent to the value of 
S, then in step 330, the value of K is initialized to zero (0). If it Is determined the value 
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of K is not equivalent to the value of S, then in step 324, the value of K is incremented 
by one and control passes back to step 306. 

[34] After the value of K has been initialized to zero (0) in step 330, then in step 320, 
it may be determined whether the value of J is equivalent to the value of R. On the 
initial pass through steps 302 to step 318, the value of J is zero (0) since it was 
initialized to zero (0). R represents the final value of the customer key selection vector 

in the sequence J=1 R. If it is determined that the value of J is equivalent to the 

value of R, then in step 332, the value of J is initialized to zero (0). If it is detennined 
the value of J is not equivalent to the value of R, then in step 326, the value of J Is 
incremented by one and control passes back to step 306. 

[35] After the value of J has been initialized to zero (0) in step 332, then in step 322, it 
may be determined whether the value of I is equivalent to the value of Q. On the initial 
pass through steps 302 to step 318, the value of I is zero (0) since It was initialized to 
zero (0). S represents the final value of the customer key in the sequence 1=1 , Q. If 
it is determined that the value of I is equivalent to the value of Q, then the exemplary 
steps end at step 336. If it is determined the value of I is not equivalent to the value of 
Q, then in step 328, the value of I Is incremented by one and control passes back to 
step 306. 

[36] FIG. 4 is a block diagram 400 of a secure key generation system that may be 
utilized to generate the output key from the plurality of input keys of FIG. 2, in 
accordance with an embodiment of the invention. Referring to FIG. 4, the key 
generation function may comprise a key generator 460, a mapper 470, a scrambler 480, 
a masking function block or masker 490, and a XOR operator 495. The secure key 
generation system 400 may also comprise a processor 402, a memory 404 and an 
encryption engine 406. 

[37] Input cus_key 420 may be provided as an input to the key generator 460 and the 
mapper 470, and input keys cus_key_sel 430 and key_var 440 may be provided as an 
input to the mapper 470. An output of the key generator 460 may be coupled to the 
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scrambler 480. An output of the mapper 470 may be coupled to an input of the masking 
function block 490 and an input to the scrambler 480. An output of the scrambler 480 
and an output of the masking function block 490 may be coupled to a XOR operator 
495. The processor 402 may be, for example, a microprocessor, a microcontroller or 
other type of encryption processor. The memory 404 may by a random access (RAM) 
memory such as a DRAM or SRAM, for example. The encryption engine 406 may be a 
DES, 3DES, AES or other encryption engine. 

[38] With reference to FIG. 4, the system 400 for producing a secure key may 
comprise a secure key generator 410 that receives at least a first input key 420, a 
second input key 430 and a third input key 440. Accordingly, the secure key generator 
410 may generate a first output key 450 based on at least the first input key 420, the 
second input key 430 and the third input key 440. The first output key 450 is generated 
so that it is a unique key and so that it differs from at least the first input key 420. The 
first input key 420 may be a customer key, the second input key 430 may be a customer 
key selection and the third input key 440 may be a key variation. The secure key 
generator 410 may determine whether the first output key 450 is a unique key and is not 
equivalent to at least the first input key 420. If the first output key 450 is not unique key 
and/or is equivalent to at least the first input key 420, the secure key generator 410 may 
generate a second output key based on a modified one of the first input key 420, the 
second input key 430 and/or the third input key 440. The secure key generator 410 
may also determine whether the second output key is a unique key and/or is not 
equivalent to at least the modified first input key, second input key and/or third input 
key. The first output key 450 and the second output key may not be a weak and/or a 
semi-weak key. 

[39] The system 400 may further comprise a mapper 470 that maps at least the first 
input key 420, the second input key 430 and the third input key 440 to generate mapped 
output key data 472. A key generator 460 may generate an intermediate key 497 based 
on the first input key 420. A scrambler 480 may scramble the generated intermediate 
key 497 and the generated mapped output key data 472 to create a scrambled output 
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482. A masker 490 may mask at least a portion of the generated mapped output key 
data 472 and an exclusive OR operator 495 may exclusive OR the masked portion of 
the generated mapped output key data 492 and the scrambled output 482 to generate 
the first output key 450. The secure key generator 410 may transfer the generated first 
output key 450 to an encryption engine 406 and the encryption engine 406 may utilize 
the generated first output key 450 to encrypt information. 

[40] Although the processor 402, the memory 404 and/or the encryption engine 406 
are shown separately from the secure key generator 410, the invention is not so limited. 
Accordingly, any combination of the processor 402, memory 404 and/or encryption 
engine 406 may be integrated within or otherwise be a part of the secure key generator 
410. In accordance with an embodiment of the invention, the processor 402 may be 
utilized to determine whether the generated key is valid and if so, the generated key 
may be kept. Otherwise, the generated key may be discarded. A table of valid keys or 
invalid keys may be stored in the memory 404. In this regard, whenever a key is 
generated, it may be compared to the valid or invalid keys that are stored in the memory 
404. The memory 404 may also contain code for the processor 402 and/or the 
encryption engine 406. 

[41] Accordingly, the present invention may be realized in hardware, software, or a 
combination of hardware and software. The present invention may be realized in a 
centralized fashion in one computer system, or in a distributed fashion where different 
elements are spread across several interconnected computer systems. Any kind of 
computer system or other apparatus adapted for carrying out the methods described 
herein is suited. A typical combination of hardware and software may be a general- 
purpose computer system with a computer program that, when being loaded and 
executed, controls the computer system such that it carries out the methods described 
herein. 

[42] The present invention may also be embedded in a computer program product, 
which comprises all the features enabling the implementation of the methods described 
herein, and which when loaded in a computer system is able to carry out these 
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methods. Computer program in the present context means any expression, in any 
language, code or notation, of a set of instructions intended to cause a system having 
an information processing capability to perform a particular function either directly or 
after either or both of the following: a) conversion to another language, code or 
notation; b) reproduction in a different material form. 

[43] While the present invention has been described with reference to certain 
embodiments, it will be understood by those skilled in the art that various changes may 
be made and equivalents may be substituted without departing from the scope of the 
present invention. In addition, many modifications may be made to adapt a particular 
situation or material to the teachings of the present invention without departing from its 
scope. Therefore, it is intended that the present invention not be limited to the particular 
embodiment disclosed, but that the present invention will include all embodiments falling 
within the scope of the appended claims. 
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